Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_s0qu9-vQNyiIm7rNPWG26tw1kg.roa
File: _s0qu9-vQNyiIm7rNPWG26tw1kg.roa (raw, json)
Hash identifier: l0Bs+CBhIMcd9HG1eGco5kjUzDZw3wTepj/UbwjgKkA=
Subject key identifier: FE:CD:2A:BB:DF:AF:40:DC:A2:22:6E:EB:34:F5:86:DB:AB:70:D6:48
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019555EE601F02D54A4021A4E33CA4C4BFB4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_s0qu9-vQNyiIm7rNPWG26tw1kg.roa
Signing time: Sun 02 Mar 2025 08:17:20 +0000
ROA not before: Sun 02 Mar 2025 08:17:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273217
IP address blocks: 31.58.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 16:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:55:ee:60:1f:02:d5:4a:40:21:a4:e3:3c:a4:c4:bf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 2 08:17:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fecd2abbdfaf40dca2226eeb34f586dbab70d648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:04:63:1f:24:3a:ce:78:6a:c6:49:a6:92:e6:
5c:02:0f:2d:aa:56:b2:0e:f7:38:bd:5a:5c:b6:d3:
b5:1a:bd:1f:f7:e3:04:f6:b8:55:2a:37:7e:43:07:
55:66:5d:6c:0d:b3:ae:69:82:dc:fd:57:ac:27:75:
7a:b0:f4:56:49:66:8f:64:50:7b:e6:f3:42:a0:d9:
ba:7a:fa:5d:66:e0:0d:ac:6d:6b:88:5b:7b:95:8d:
30:f0:04:c7:d2:46:6c:06:7c:97:fe:f0:fd:b2:48:
01:7c:3b:48:48:c0:84:33:f5:be:7d:98:48:ed:73:
49:92:55:f3:6c:82:45:e4:da:85:18:42:78:c7:a0:
5c:52:b3:bf:45:37:2d:cb:3f:18:04:c1:71:63:dd:
15:71:b2:b8:bb:87:b4:7f:ac:fd:57:b0:93:65:3a:
20:76:6e:70:4c:ed:5d:8d:bf:ec:f0:cd:03:ab:45:
d8:10:39:84:77:9e:05:99:97:f7:94:29:c2:25:89:
0a:77:fe:f6:8f:c8:e8:99:9e:e2:17:6b:93:3f:4a:
7e:8b:12:6d:e6:2e:d5:02:67:f8:bf:a7:4a:cc:93:
4f:91:25:41:cb:0b:81:ce:43:40:2c:1a:ab:df:ba:
f8:d1:14:f2:d1:14:f3:73:90:e8:8c:4f:38:1c:7a:
93:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CD:2A:BB:DF:AF:40:DC:A2:22:6E:EB:34:F5:86:DB:AB:70:D6:48
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_s0qu9-vQNyiIm7rNPWG26tw1kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.77.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b2:00:14:43:56:cd:55:e8:a6:30:9b:b3:7b:7a:75:f8:e3:
35:03:8d:85:8a:26:17:1e:13:15:4e:57:14:f1:63:4c:a1:1b:
92:ca:93:b9:a8:12:25:6c:15:29:ff:41:27:a9:b4:71:22:12:
55:ed:b8:e7:dc:da:ba:64:67:bb:bb:16:7f:13:71:b7:09:e8:
7e:2f:eb:57:92:48:d9:84:f7:ae:8e:c7:37:9e:65:47:5f:6a:
5f:c4:21:5e:ac:95:7e:5a:08:e6:96:56:94:b5:31:15:c7:94:
e5:39:48:1a:88:2b:4c:3c:be:78:07:e4:dc:47:a9:3d:61:68:
8a:e0:7e:5d:f4:11:53:ef:82:fb:15:a8:1c:60:a2:2e:b0:0e:
9a:56:81:b5:e5:e4:06:5f:40:6d:20:d3:42:2f:8e:59:9f:64:
e6:f0:b5:0b:11:d1:46:b6:96:e6:ad:88:5c:dc:74:00:5f:cc:
a5:db:7d:6b:c1:d4:b1:74:6f:35:44:2d:95:73:51:4b:28:a5:
b2:89:69:ec:ae:21:8d:aa:4f:b9:ce:50:e0:91:51:97:36:c9:
03:f3:7b:e6:99:26:91:9e:e7:c2:4c:7f:5b:57:1a:7e:92:1e:
bb:b9:8e:77:ca:46:5f:d7:d2:72:36:59:80:94:b3:81:63:41:
c9:b3:ee:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:50:20 2025 by rpki-client